mirror of
https://github.com/linuxserver/docker-swag.git
synced 2026-11-05 16:49:23 +09:00
Compare commits
14
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 LinuxServer-CI
|
62adeac333 | ||
|
LinuxServer-CI
|
48d3f7a05d | ||
 Eric Nemchik
|
37f65cf01a | ||
|
Eric Nemchik
|
f15b41b67f | ||
|
Eric Nemchik
|
7a83b73126 | ||
|
Eric Nemchik
|
2807f25ee0 | ||
|
LinuxServer-CI
|
6f68d40a7a | ||
|
LinuxServer-CI
|
4ec09cbad5 | ||
 quietsy
|
f503b59b62 | ||
|
Eric Nemchik
|
aeb7370675 | ||
 chpego
|
c21f88d530 | ||
|
chpego
|
015dd83612 | ||
|
chpego
|
9f6e490904 | ||
|
chpego
|
f19871923e |
No files matched your search
@@ -96,7 +96,7 @@ It is recommended to attempt obtaining a certificate with `STAGING=true` first t
|
||||
### Site config and reverse proxy
|
||||
|
||||
* The default site config resides at `/config/nginx/site-confs/default.conf`. Feel free to modify this file, and you can add other conf files to this directory. However, if you delete the `default` file, a new default will be created on container start.
|
||||
* Preset reverse proxy config files are added for popular apps. See the `README.md` file under `/config/nginx/proxy_confs` for instructions on how to enable them. The preset confs reside in and get imported from [this repo](https://github.com/linuxserver/reverse-proxy-confs).
|
||||
* Preset reverse proxy config files are added for popular apps. See the `README.md` file under `/config/nginx/proxy-confs` for instructions on how to enable them. The preset confs reside in and get imported from [this repo](https://github.com/linuxserver/reverse-proxy-confs).
|
||||
* If you wish to hide your site from search engine crawlers, you may find it useful to add this configuration line to your site config, within the server block, above the line where ssl.conf is included
|
||||
`add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";`
|
||||
This will *ask* Google et al not to index and list your site. Be careful with this, as you will eventually be de-listed if you leave this line in on a site you wish to be present on search engines
|
||||
@@ -436,6 +436,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
|
||||
|
||||
## Versions
|
||||
|
||||
* **20.10.26:** - [Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) proxy.conf, authelia-server.conf, authentik-server.conf, tinyauth-server.conf - Update Nginx configuration to replace $http_host with $host$is_request_port$request_port for better compatibility.
|
||||
* **09.09.26:** - Use new X-Tinyauth-Location header in Tinyauth locations and remove duplicate auth module headers.
|
||||
* **19.07.26:** - Rebase to Alpine 3.24 with PHP 8.5.
|
||||
* **10.07.26:** - Add support for Let's Encrypt cert profiles. Run certbot twice daily with a random delay.
|
||||
|
||||
+57
-58
@@ -23,15 +23,15 @@ azure-mgmt-dns 9.0.0 python
|
||||
backports-tarfile 1.2.0 python
|
||||
bash 5.3.9-r1 apk
|
||||
beautifulsoup4 4.15.0 python
|
||||
boto3 1.43.114 python
|
||||
botocore 1.43.114 python
|
||||
boto3 1.43.117 python
|
||||
botocore 1.43.117 python
|
||||
brotli-libs 1.2.0-r1 apk
|
||||
bs4 0.0.2 python
|
||||
busybox 1.37.0-r31 apk
|
||||
busybox-binsh 1.37.0-r31 apk
|
||||
c-ares 1.34.8-r0 apk
|
||||
ca-certificates 20260909-r0 apk
|
||||
ca-certificates-bundle 20260909-r0 apk
|
||||
c-ares 1.34.9-r0 apk
|
||||
ca-certificates 20261020-r0 apk
|
||||
ca-certificates-bundle 20261020-r0 apk
|
||||
catatonit 0.2.1-r0 apk
|
||||
certbot 5.8.0 python
|
||||
certbot-dns-acmedns 0.1.0 python
|
||||
@@ -58,7 +58,7 @@ certbot-dns-godaddy 2.8.0 python
|
||||
certbot-dns-google 5.8.0 python
|
||||
certbot-dns-he 1.0.0 python
|
||||
certbot-dns-hetzner 4.0.0 python
|
||||
certbot-dns-hetzner-cloud 1.0.5 python
|
||||
certbot-dns-hetzner-cloud 1.1.0 python
|
||||
certbot-dns-infomaniak 0.3.3 python
|
||||
certbot-dns-inwx 3.0.3 python
|
||||
certbot-dns-ionos 2024.11.9 python
|
||||
@@ -79,7 +79,7 @@ certbot-dns-standalone 1.2.1 python
|
||||
certbot-dns-transip 0.5.2 python
|
||||
certbot-dns-vultr 1.1.0 python
|
||||
certbot-plugin-gandi 1.5.0 python
|
||||
certifi 2026.7.22 python
|
||||
certifi 2026.10.19 python
|
||||
cffi 2.1.1 python
|
||||
charset-normalizer 3.5.2 python
|
||||
cli UNKNOWN binary
|
||||
@@ -104,7 +104,7 @@ domeneshop 0.4.4 python
|
||||
fail2ban 1.1.0 python
|
||||
fail2ban 1.1.0-r3 apk
|
||||
fail2ban-pyc 1.1.0-r3 apk
|
||||
filelock 4.2.0 python
|
||||
filelock 4.2.4 python
|
||||
findutils 4.10.0-r1 apk
|
||||
fontconfig 2.17.1-r1 apk
|
||||
freetype 2.14.3-r0 apk
|
||||
@@ -169,7 +169,7 @@ libcurl 8.22.0-r0 apk
|
||||
libdav1d 1.5.3-r0 apk
|
||||
libedit 20260508.3.1-r1 apk
|
||||
libevent 2.1.13-r0 apk
|
||||
libexpat 2.8.5-r0 apk
|
||||
libexpat 2.9.0-r0 apk
|
||||
libffi 3.5.2-r1 apk
|
||||
libgcc 15.2.0-r5 apk
|
||||
libgcrypt 1.12.2-r0 apk
|
||||
@@ -205,13 +205,13 @@ libtasn1 4.21.0-r0 apk
|
||||
libunistring 1.4.2-r0 apk
|
||||
libuuid 2.42.3-r1 apk
|
||||
libwebp 1.6.0-r0 apk
|
||||
libx11 1.8.13-r0 apk
|
||||
libx11 1.8.14-r0 apk
|
||||
libxau 1.0.12-r0 apk
|
||||
libxcb 1.17.0-r2 apk
|
||||
libxdmcp 1.1.5-r1 apk
|
||||
libxext 1.3.7-r0 apk
|
||||
libxml2 2.13.9-r2 apk
|
||||
libxpm 3.5.19-r0 apk
|
||||
libxpm 3.5.20-r0 apk
|
||||
libxslt 1.1.43-r3 apk
|
||||
libxt 1.3.1-r0 apk
|
||||
libxtables 1.8.13-r0 apk
|
||||
@@ -229,7 +229,7 @@ more-itertools 10.8.0 python
|
||||
mpdecimal 4.0.1-r0 apk
|
||||
msal 1.39.0 python
|
||||
msal-extensions 1.3.1 python
|
||||
musl 1.2.6-r2 apk
|
||||
musl 1.2.6-r3 apk
|
||||
musl-utils 1.2.6-r2 apk
|
||||
nano 9.2-r0 apk
|
||||
ncurses-terminfo-base 6.6_p20260516-r0 apk
|
||||
@@ -260,61 +260,60 @@ oniguruma 6.9.10-r0 apk
|
||||
openssl 3.5.9-r0 apk
|
||||
opentelemetry-api 1.45.1 python
|
||||
p11-kit 0.26.2-r0 apk
|
||||
packaging 26.0 python
|
||||
packaging 26.3 python
|
||||
packaging 26.3 python (+1 duplicate)
|
||||
parsedatetime 2.6 python
|
||||
pcre2 10.49-r0 apk
|
||||
perl 5.42.2-r1 apk
|
||||
perl-error 0.17030-r0 apk
|
||||
perl-git 2.54.0-r0 apk
|
||||
php85 8.5.11-r0 apk
|
||||
php85-bcmath 8.5.11-r0 apk
|
||||
php85-bz2 8.5.11-r0 apk
|
||||
php85-common 8.5.11-r0 apk
|
||||
php85-ctype 8.5.11-r0 apk
|
||||
php85-curl 8.5.11-r0 apk
|
||||
php85-dom 8.5.11-r0 apk
|
||||
php85-exif 8.5.11-r0 apk
|
||||
php85-fileinfo 8.5.11-r0 apk
|
||||
php85-fpm 8.5.11-r0 apk
|
||||
php85-ftp 8.5.11-r0 apk
|
||||
php85-gd 8.5.11-r0 apk
|
||||
php85-gmp 8.5.11-r0 apk
|
||||
php85-iconv 8.5.11-r0 apk
|
||||
php85-intl 8.5.11-r0 apk
|
||||
php85-ldap 8.5.11-r0 apk
|
||||
php85-mbstring 8.5.11-r0 apk
|
||||
php85-mysqli 8.5.11-r0 apk
|
||||
php85-mysqlnd 8.5.11-r0 apk
|
||||
php85-openssl 8.5.11-r0 apk
|
||||
php85-pdo 8.5.11-r0 apk
|
||||
php85-pdo_mysql 8.5.11-r0 apk
|
||||
php85-pdo_odbc 8.5.11-r0 apk
|
||||
php85-pdo_pgsql 8.5.11-r0 apk
|
||||
php85-pdo_sqlite 8.5.11-r0 apk
|
||||
php85-pear 8.5.11-r0 apk
|
||||
php85 8.5.12-r0 apk
|
||||
php85-bcmath 8.5.12-r0 apk
|
||||
php85-bz2 8.5.12-r0 apk
|
||||
php85-common 8.5.12-r0 apk
|
||||
php85-ctype 8.5.12-r0 apk
|
||||
php85-curl 8.5.12-r0 apk
|
||||
php85-dom 8.5.12-r0 apk
|
||||
php85-exif 8.5.12-r0 apk
|
||||
php85-fileinfo 8.5.12-r0 apk
|
||||
php85-fpm 8.5.12-r0 apk
|
||||
php85-ftp 8.5.12-r0 apk
|
||||
php85-gd 8.5.12-r0 apk
|
||||
php85-gmp 8.5.12-r0 apk
|
||||
php85-iconv 8.5.12-r0 apk
|
||||
php85-intl 8.5.12-r0 apk
|
||||
php85-ldap 8.5.12-r0 apk
|
||||
php85-mbstring 8.5.12-r0 apk
|
||||
php85-mysqli 8.5.12-r0 apk
|
||||
php85-mysqlnd 8.5.12-r0 apk
|
||||
php85-openssl 8.5.12-r0 apk
|
||||
php85-pdo 8.5.12-r0 apk
|
||||
php85-pdo_mysql 8.5.12-r0 apk
|
||||
php85-pdo_odbc 8.5.12-r0 apk
|
||||
php85-pdo_pgsql 8.5.12-r0 apk
|
||||
php85-pdo_sqlite 8.5.12-r0 apk
|
||||
php85-pear 8.5.12-r0 apk
|
||||
php85-pecl-apcu 5.1.28-r0 apk
|
||||
php85-pecl-igbinary 3.2.17_rc1-r0 apk
|
||||
php85-pecl-memcached 3.4.0-r0 apk
|
||||
php85-pecl-msgpack 3.0.1-r0 apk
|
||||
php85-pecl-redis 6.3.0-r0 apk
|
||||
php85-pgsql 8.5.11-r0 apk
|
||||
php85-phar 8.5.11-r0 apk
|
||||
php85-posix 8.5.11-r0 apk
|
||||
php85-session 8.5.11-r0 apk
|
||||
php85-simplexml 8.5.11-r0 apk
|
||||
php85-soap 8.5.11-r0 apk
|
||||
php85-sockets 8.5.11-r0 apk
|
||||
php85-sodium 8.5.11-r0 apk
|
||||
php85-sqlite3 8.5.11-r0 apk
|
||||
php85-tokenizer 8.5.11-r0 apk
|
||||
php85-xml 8.5.11-r0 apk
|
||||
php85-xmlreader 8.5.11-r0 apk
|
||||
php85-xmlwriter 8.5.11-r0 apk
|
||||
php85-xsl 8.5.11-r0 apk
|
||||
php85-zip 8.5.11-r0 apk
|
||||
php85-pgsql 8.5.12-r0 apk
|
||||
php85-phar 8.5.12-r0 apk
|
||||
php85-posix 8.5.12-r0 apk
|
||||
php85-session 8.5.12-r0 apk
|
||||
php85-simplexml 8.5.12-r0 apk
|
||||
php85-soap 8.5.12-r0 apk
|
||||
php85-sockets 8.5.12-r0 apk
|
||||
php85-sodium 8.5.12-r0 apk
|
||||
php85-sqlite3 8.5.12-r0 apk
|
||||
php85-tokenizer 8.5.12-r0 apk
|
||||
php85-xml 8.5.12-r0 apk
|
||||
php85-xmlreader 8.5.12-r0 apk
|
||||
php85-xmlwriter 8.5.12-r0 apk
|
||||
php85-xsl 8.5.12-r0 apk
|
||||
php85-zip 8.5.12-r0 apk
|
||||
pinentry 1.3.2-r0 apk
|
||||
pip 26.2.1 python
|
||||
pip 26.2.2 python
|
||||
pkb-client 2.3.1 python
|
||||
platformdirs 4.4.0 python
|
||||
popt 1.19-r4 apk
|
||||
@@ -346,9 +345,9 @@ requests 2.34.2 python
|
||||
requests-file 3.0.1 python
|
||||
requests-mock 1.12.1 python
|
||||
requests-unixsocket 0.4.1 python
|
||||
s3transfer 0.19.2 python
|
||||
s3transfer 0.19.3 python
|
||||
scanelf 1.3.9-r1 apk
|
||||
setuptools 84.0.0 python
|
||||
setuptools 84.2.1 python
|
||||
shadow 4.18.0-r1 apk
|
||||
six 1.17.0 python
|
||||
skalibs-libs 2.15.0.0-r0 apk
|
||||
|
||||
+2
-1
@@ -94,7 +94,7 @@ app_setup_block: |
|
||||
### Site config and reverse proxy
|
||||
|
||||
* The default site config resides at `/config/nginx/site-confs/default.conf`. Feel free to modify this file, and you can add other conf files to this directory. However, if you delete the `default` file, a new default will be created on container start.
|
||||
* Preset reverse proxy config files are added for popular apps. See the `README.md` file under `/config/nginx/proxy_confs` for instructions on how to enable them. The preset confs reside in and get imported from [this repo](https://github.com/linuxserver/reverse-proxy-confs).
|
||||
* Preset reverse proxy config files are added for popular apps. See the `README.md` file under `/config/nginx/proxy-confs` for instructions on how to enable them. The preset confs reside in and get imported from [this repo](https://github.com/linuxserver/reverse-proxy-confs).
|
||||
* If you wish to hide your site from search engine crawlers, you may find it useful to add this configuration line to your site config, within the server block, above the line where ssl.conf is included
|
||||
`add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";`
|
||||
This will *ask* Google et al not to index and list your site. Be careful with this, as you will eventually be de-listed if you leave this line in on a site you wish to be present on search engines
|
||||
@@ -220,6 +220,7 @@ init_diagram: |
|
||||
"swag:latest" <- Base Images
|
||||
# changelog
|
||||
changelogs:
|
||||
- {date: "20.10.26:", desc: "[Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) proxy.conf, authelia-server.conf, authentik-server.conf, tinyauth-server.conf - Update Nginx configuration to replace $http_host with $host$is_request_port$request_port for better compatibility."}
|
||||
- {date: "09.09.26:", desc: "Use new X-Tinyauth-Location header in Tinyauth locations and remove duplicate auth module headers."}
|
||||
- {date: "19.07.26:", desc: "Rebase to Alpine 3.24 with PHP 8.5."}
|
||||
- {date: "10.07.26:", desc: "Add support for Let's Encrypt cert profiles. Run certbot twice daily with a random delay."}
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2025/03/25 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-server.conf.sample
|
||||
## Version 2026/10/20 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authelia-server.conf.sample
|
||||
# Make sure that your authelia container is in the same user defined bridge network and is named authelia
|
||||
# Rename /config/nginx/proxy-confs/authelia.subdomain.conf.sample to /config/nginx/proxy-confs/authelia.subdomain.conf
|
||||
|
||||
@@ -28,7 +28,7 @@ location @authelia_proxy_signin {
|
||||
add_header Set-Cookie $set_cookie;
|
||||
|
||||
## Set the $target_url variable based on the original request
|
||||
set_escape_uri $target_url $scheme://$http_host$request_uri;
|
||||
set_escape_uri $target_url $scheme://$host$is_request_port$request_port$request_uri;
|
||||
|
||||
## Translate the Location response header from the auth subrequest into a variable
|
||||
auth_request_set $signin_url $upstream_http_location;
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2025/03/25 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authentik-server.conf.sample
|
||||
## Version 2026/10/20 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/authentik-server.conf.sample
|
||||
# Make sure that your authentik container is in the same user defined bridge network and is named authentik-server
|
||||
# Rename /config/nginx/proxy-confs/authentik.subdomain.conf.sample to /config/nginx/proxy-confs/authentik.subdomain.conf
|
||||
|
||||
@@ -38,10 +38,10 @@ location @goauthentik_proxy_signin {
|
||||
add_header Set-Cookie $set_cookie;
|
||||
|
||||
## Set the $target_url variable based on the original request
|
||||
set_escape_uri $target_url $scheme://$http_host$request_uri;
|
||||
set_escape_uri $target_url $scheme://$host$is_request_port$request_port$request_uri;
|
||||
|
||||
## Set the $signin_url variable
|
||||
set $signin_url https://$http_host/outpost.goauthentik.io/start?rd=$target_url;
|
||||
set $signin_url https://$host$is_request_port$request_port/outpost.goauthentik.io/start?rd=$target_url;
|
||||
|
||||
## Redirect to login
|
||||
return 302 $signin_url;
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2023/02/09 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/proxy.conf.sample
|
||||
## Version 2026/10/20 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/proxy.conf.sample
|
||||
|
||||
# Timeout if the real server is dead
|
||||
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
|
||||
@@ -21,17 +21,17 @@ proxy_no_cache $cookie_session;
|
||||
# Proxy Header Settings
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_set_header Early-Data $ssl_early_data;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header Host $host; # NOTE: only use $host here, port is handled separately
|
||||
proxy_set_header Proxy "";
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Host $host; # NOTE: only use $host here, port is handled separately
|
||||
proxy_set_header X-Forwarded-Method $request_method;
|
||||
proxy_set_header X-Forwarded-Port $server_port;
|
||||
proxy_set_header X-Forwarded-Port $request_port;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Server $host;
|
||||
proxy_set_header X-Forwarded-Server $host; # NOTE: only use $host here, port is handled separately
|
||||
proxy_set_header X-Forwarded-Ssl on;
|
||||
proxy_set_header X-Forwarded-Uri $request_uri;
|
||||
proxy_set_header X-Original-Method $request_method;
|
||||
proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
|
||||
proxy_set_header X-Original-URL $scheme://$host$is_request_port$request_port$request_uri;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2026/03/07 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
|
||||
## Version 2026/10/20 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/site-confs/default.conf.sample
|
||||
|
||||
# redirect all traffic to https
|
||||
server {
|
||||
@@ -7,6 +7,11 @@ server {
|
||||
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
|
||||
# NOTE FOR USERS: If your external HTTP and HTTPS ports are asymmetrical
|
||||
# (e.g., External 8443 maps to Nginx 443),
|
||||
# replace the return above this one and hardcode your external HTTPS port:
|
||||
# return 301 https://$host:8443$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2026/09/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample
|
||||
## Version 2026/10/20 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample
|
||||
# Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth
|
||||
# Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf
|
||||
|
||||
@@ -15,7 +15,7 @@ location /tinyauth {
|
||||
proxy_set_header Content-Length "";
|
||||
|
||||
# Headers needed for authentication
|
||||
proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
|
||||
proxy_set_header X-Original-URL $scheme://$host$is_request_port$request_port$request_uri;
|
||||
proxy_set_header X-Original-Method $request_method;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
|
||||
Reference in new issue
Block a user